xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc->oldNs.
{
"unresolved_ranges": [
{
"source": "CPE_RANGE",
"cpes": [
"cpe:2.3:a:siemens:sinema_remote_connect_server:*:*:*:*:*:*:*:*"
],
"vendor_product": "siemens:sinema_remote_connect_server",
"extracted_events": [
{
"fixed": "3.0"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"introduced": "12.04"
},
{
"last_affected": "12.04"
},
{
"introduced": "14.04"
},
{
"last_affected": "14.04"
},
{
"introduced": "16.04"
},
{
"last_affected": "16.04"
},
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "19.10"
},
{
"last_affected": "19.10"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"introduced": "30"
},
{
"last_affected": "30"
},
{
"introduced": "32"
},
{
"last_affected": "32"
}
]
},
{
"source": "CPE_STRING",
"cpes": [
"cpe:2.3:a:oracle:real_user_experience_insight:13.3.1.0:*:*:*:*:*:*:*"
],
"vendor_product": "oracle:real_user_experience_insight",
"extracted_events": [
{
"introduced": "13.3.1.0"
},
{
"last_affected": "13.3.1.0"
}
]
}
]
}"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-19956.json"
[
{
"source": "https://gitlab.gnome.org/gnome/libxml2@5a02583c7e683896d84878bd90641d8d9b0d0549",
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"function_hash": "155609369705777665835138486000048859855",
"length": 2890.0
},
"id": "CVE-2019-19956-a430ba09",
"target": {
"function": "xmlParseBalancedChunkMemoryRecover",
"file": "parser.c"
},
"deprecated": false
},
{
"source": "https://gitlab.gnome.org/gnome/libxml2@5a02583c7e683896d84878bd90641d8d9b0d0549",
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"line_hashes": [
"174689908042702355240525884889221281587",
"271279565681430565032319406652605988188",
"221943023674450317312358539662071769608",
"225679870827368357168821072979106431103"
],
"threshold": 0.9
},
"id": "CVE-2019-19956-dd0ef925",
"target": {
"file": "parser.c"
},
"deprecated": false
}
]
"2026-08-04T15:26:59Z"